logstash2.2.0过滤tomcat日志
内容导读
互联网集市收集整理的这篇技术教程文章主要介绍了logstash2.2.0过滤tomcat日志,小编现在分享给大家,供广大互联网技能从业者学习和参考。文章包含2143字,纯文字阅读大概需要4分钟。
内容图文
input { file { type => "java-err" path => "/fsmeeting/tomcat-service/logs/catalina.out" tags => "java-err" codec => multiline { pattern => "^%{TIMESTAMP_ISO8601}" negate => true what => "previous" } } } filter { if [type] == "java-err" { grok { match => { "message" => "%{TIMESTAMP_ISO8601:date} \[(?<thread_name>.+?)\]-\[(?<log_level>\w+)\]\s*(?<content>.*)"} } mutate { remove_field => "content" } if [log_level] != "ERROR" { drop {} } } } output { elasticsearch { host => "192.168.5.231" protocol => "http" index => "java-err-%{+YYYY.MM.dd}" } email { body => "%{message}" from => "xxxxxxx" contenttype => "text/plain; charset=UTF-8" options => [ "smtpIporHost", "smtp.sina.com", "userName", "xxxxxxx", "password", "*********", "authenticationType", "login" ] subject => "服务器%{host} %{type}日志异常" to => "xxxxxxxx" } }
去重发日志:
input { file { type => "java-err" path => "/fsmeeting/tomcat-service/logs/catalina.out" tags => "java-err" codec => multiline { pattern => "^%{TIMESTAMP_ISO8601}" negate => true what => "previous" } } } filter { if [type] == "java-err" { grok { match => { "message" => "%{TIMESTAMP_ISO8601:date} \[(?<thread_name>.+?)\]-\[(?<log_level>\w+)\]\s*(?<content>.*)"} } mutate { remove_field => "content" } if [log_level] == "ERROR" { throttle { after_count => 2 key => "%{content}" add_tag => "throttled" } } if [log_level] != "ERROR" { drop {} } } } output { elasticsearch { host => "192.168.5.231" protocol => "http" index => "java-err-%{+YYYY.MM.dd}" } if "throttled" not in [tags] and [type] == "java-err" and [log_level] == "ERROR" email { body => "%{message}" from => "xxxxxxx" contenttype => "text/plain; charset=UTF-8" options => [ "smtpIporHost", "smtp.sina.com", "userName", "xxxxxxx", "password", "*********", "authenticationType", "login" ] subject => "服务器%{host} %{type}日志异常" to => "xxxxxxxx" } } }
本文出自 “清晰明了” 博客,请务必保留此出处http://duanyexuanmu.blog.51cto.com/1010786/1763840
原文:http://duanyexuanmu.blog.51cto.com/1010786/1763840
内容总结
以上是互联网集市为您收集整理的logstash2.2.0过滤tomcat日志全部内容,希望文章能够帮你解决logstash2.2.0过滤tomcat日志所遇到的程序开发问题。 如果觉得互联网集市技术教程内容还不错,欢迎将互联网集市网站推荐给程序员好友。
内容备注
版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 gblab@vip.qq.com 举报,一经查实,本站将立刻删除。
内容手机端
扫描二维码推送至手机访问。